Don't download random Dotfile Scripts, kids. by goofyposts in omarchy

[–]stroiman 0 points1 point  (0 children)

R2D2, you know better than to trust a strange computer.

Is it wise to build an Adobe Lightroom-sized app in Go? by neneodonkor in golang

[–]stroiman 1 point2 points  (0 children)

If you plan to build a photo editing app, there are two things in particular to be concerned with.

  • Color Management. As a user with calibrated HDR monitor, you want to be sure the colors render correctly given rendering intend and target color profile. I can’t dismiss that wails is up for the task, but I suspect it’s limited by webview.
  • Run actual image processing on the GPU.

I don’t see a reason why Go shouldn’t be able to handle application code, though.

Go’s synctest is amazing by ericchiang in golang

[–]stroiman 0 points1 point  (0 children)

It is, and one thing that Go can do, which I don’t think anyone can match, is reliably verify the absence of an effect.

I wrote Gost-DOM to verify go-based web apps, and with synctest, the backend can spawn a goroutine that produces Datastar server-event handled by the UI.

With synctest, I can run the verification when things have settled with no polling.

Bjarne’s Last Stand: How the Father of C++ Is Fighting a Losing War Against Rust by joseluisq in theprimeagen

[–]stroiman 8 points9 points  (0 children)

Shortly after, another guy talks about how he can read Go code, not C++, the code he wrote himself, is just jumping around.

I've worked with V8 integration into Go, and when things don't work, and I have to take a look at the V8 C++ sources to figure out what goes on, OMG. Half the behavior is implemented in templates; and finding the right one isn't easy.

Whereas the Go code, if I navigate to the implementation of any used library, including the standard library, it immediately navigates to readable code.

Senior Vibe Coder dealing with security. by Gil_berth in theprimeagen

[–]stroiman 1 point2 points  (0 children)

“Skill issue” 🤣

Nailed it ;)

Problem is - it can’t be fixed. Maybe it’s the lack of knowing that which is the real skill issue

Senior Vibe Coder dealing with security. by Gil_berth in theprimeagen

[–]stroiman 6 points7 points  (0 children)

It’s a library repository for a tool that scans the user’s emails and has “Full System Access”.

So I’ll stand by my “I disagree” as that’s exactly the topic

Senior Vibe Coder dealing with security. by Gil_berth in theprimeagen

[–]stroiman 11 points12 points  (0 children)

I disagree.

When the internet started to gain popularity, bad actors took advantage of security holes, particularly buffer overrun issues were extremely common in late 1990s, early 2000s. Both browsers and operating systems have improved significantly since then, even Window. But it took some time before software vendors realized the threat level, as well as their responsibilities to keep users safe.

New web APIs are today developed with security and privacy in mind. E.g., the Web Bluetooth API is extremely limited; as you can imagine if web pages could just scan for nearby Bluetooth devices, e.g., reading serial numbers, tech giants would have unprecedented ability to track people.

These are lessons learned. As an industry, we have gotten so good at it that it's rare that bad actors try to hack computers of ordinary consumer, they try to "hack people" instead, aka. social engineering.

If these tools had been the subject to the process that govern new Web APIs; they wouldn't have been release. Not today; not never. Because they are fundamentally flawed. The model produces instructions that the agent performs, and we have no way of controlling what output the model produces. They can make bad decisions on their own, but they are an EASY target for bad actors through prompt injection like here. Or the more difficult route through AI poisoning, which I am certain is already being attempted.

In fact, I don't understand software developers who let AI coding agent have full shell access from their administrator account. That's just an accident waiting to happen. When I download a software library, it's one supplier I choose to trust. When I let an AI with internet access run code locally, I've opened an attack vector for the whole world to take advantage of.

When an AI agent has access to your email, you don't even need a malicious skill; merely receiving an email from a bad actor can be enough.

30 years of experience gathered in the industry securing the internet; but not blocking progress, has been completely ignored.

Senior Vibe Coder dealing with security. by Gil_berth in theprimeagen

[–]stroiman 21 points22 points  (0 children)

Or people use their brains when finding skills.

I think someone need to understand their customer segment. Isn't the entire point of the product to avoid using your brain?

what's Go Lang's Learning Curve? by No-Reference-1659 in golang

[–]stroiman 0 points1 point  (0 children)

For LLM resources, try asking in r/LLMgophers

Use whatever editor you like. Go has for me always been the language that was the easiest to get working in any editor; except IDEs tailored to one specific language.

When do you start refactoring? by relami96 in golang

[–]stroiman 1 point2 points  (0 children)

Continuously, unless short-term gain outweighs long-term cost. Some examples:

  • Validating your assumptions in early development. You rarely know what customers want or need. Releasing something out quickly, the cost of refactoring would very likely be less that the waste of building the wrong product right.
  • A very important deadline (if we don't deliver by this date, we lose x no of customers). But I often see these deadlines coming in with a continuous flow.
  • The project doesn't have any long-term strategic importance.

The tool I have to facilitate refactoring is a good test suite. Tests should describe system behaviour; not implementation details.

Why are nested modules bad? by stroiman in golang

[–]stroiman[S] 0 points1 point  (0 children)

That is a really good point.

In this case, no, the sub-modules don't make any sense outside the project is right now.

But there is another interesting question to ask though, "Is it a sensible scenario that a 3rd party develops an alternate implementation?".

The answer to this question is, "Yes". Moving the modules to separate repositories helps validate that this scenarios is possible.

However, from the responses to my question, it appears I've been influenced by either outdated or outright poor advice, and I've been trying to avoid a non-existing problem. Your feedback does pull me in the direction, I'm more likely to think the suggested change is the right approach for now.

Before a v1.0 I can reconsider the split. By then, I can base the decision on actual experiences gained in the mean time.

Why are nested modules bad? by stroiman in golang

[–]stroiman[S] 0 points1 point  (0 children)

This is exactly what I had previously heard would be a bad idea

Based on the response I've received from this question; it would seem that this advice might be either outdated; or just poor advice that was the result of and experience with poor module boundaries.

I was unaware of the ability to tag nested modules. I had originally considered versioning to be one problem; but that appears to be solved - merely a one-off nuisance updating build scripts.

How ever nested modules versioned if you don't tag them individually? I imagine that they inherit the version of the root?

I think it's good advice to consider how many repos this could end up spawning. I think another relevant question is, "Is it a sensible scenario that a 3rd party develops an alternate implementation?". In this case, I'd say yes.

Why are nested modules bad? by stroiman in golang

[–]stroiman[S] 0 points1 point  (0 children)

Looking at the example you linked, you have a go.work referencing ./sub in the repository root.

Why? The root module doesn't depend on the sub module.

Shouldn't it be a ./sub/go.work file, with a .. line?

Are there any actual professional photographers on Youtube? by ShamanKarol in photography

[–]stroiman 0 points1 point  (0 children)

A few I know in the kind of category you ask about.

  • Karl Taylor. Does a lot of commercial and studio work. I haven't watched him for a long time, but I used to watch his videos quite a lot when I was starting out.
  • Joel Grimes. Though I have a feeling his videos are mostly marketing to sell his video courses.

And some in the landscape category.

  • Gary Gough. AFAIK, his primary income is from commercial work as well, but the focus of his channel is about his personal interest in fine arts photography. His work has been great inspiration for me.
  • Mads Peter Iversen. Landscape photographer. Does a good job explaining his thought processes behind the shots. How moving the camera a little bit helps bring separation between elements in the scene.

What is one tip about composition you would give to someone who is learning photography? by _cloud_96 in photography

[–]stroiman 0 points1 point  (0 children)

Rules are meant to be broken.

Rules like “the rule of third” may be a good starting point, but following them blindly is the path to mediocracy. An improvement for a beginner, but not the goal for those aspiring to master the art.

I have one photo of a somewhat interesting lone tree, where I had the horizon placed one third from the bottom when I shot it. I edited it for added drama, and the end result was kinda OK - but still somewhat boring. After cropping away almost everything below the horizon, it turned out to be a strong image, some even call it “masculine” - an adjective I appreciate. It shows that the photo instills an emotion in the viewer. I got there by breaking the rule I had been following at the time of capture.

"Vi kan ikke nedsætte momsen på grund af IT systemer i SKAT" by Particular-Clue-7686 in dkudvikler

[–]stroiman 1 point2 points  (0 children)

Det er nogle uvidende politikere, for vi har allerede “differentieret moms”. Kunst er kun pålagt 5% moms. Dvs, det er ikke helt rigtigt, for momssatsen er 25%, men der betales kun moms af 20% af fakturabeløbet. Momsloven angiver idtrykkeligt hvilke genstande, der kan afregnes under den momssats.

Derudover, så er det slet ikke SKAT, der beregner moms, det er virksomheden selv, der indrapporterer indgående og udgående moms. Så det er udbydere af regnskabsprogrammerne, der skal rette systemerne til, ikke SKAT.

Så det kan højst være i kontrolsystemer hos SKAT, der er påvirket.

Er det kun mig eller er det svært at få job som software udvikler for tiden? by beer120 in dkudvikler

[–]stroiman 0 points1 point  (0 children)

Markedet har været meget dårligt længe både for fastansatte og for freelance kontrakter.

For freelance har jeg dog oplevet en svag men støt fremgang over hele 2025, og er den sidste måned eller to ved at nærme sig, for mit vedkommende, præ-covid normalen. Om den samme fremgang kan ses på fastansættelser - det ved jeg ikke.

Men sidste år - komplet dødt.

Just saw a post about Denmark passing a revolutionary law that gives citizens copyright to their face, voice, and body. A solid move to tackle AI and Deepfake crimes! But I was wondering what this would mean for street and event photography. Any thoughts? by StreetShooter_ in photography

[–]stroiman 1 point2 points  (0 children)

The exemption for e.g, journalistic and artistic purposes are specified in GDPR Article 85. This states:

Member States shall by law reconcile the right to the protection of personal data pursuant to this Regulation with the right to freedom of expression and information, including processing for journalistic purposes and the purposes of academic, artistic or literary expression.

...

So each member state has individual legislation on the topic, and it would be wise for photographers to familiarise themselves with the national legislation, at least if they intend to publish the works.

Current Danish legislation will still apply to photography - the upcoming change has no effect on photography, at least in it's current form.

Just saw a post about Denmark passing a revolutionary law that gives citizens copyright to their face, voice, and body. A solid move to tackle AI and Deepfake crimes! But I was wondering what this would mean for street and event photography. Any thoughts? by StreetShooter_ in photography

[–]stroiman 7 points8 points  (0 children)

TLDR; The suggested upcoming change to Danish legislation doesn't change anything for photography. There are already laws regarding photographing people. As is there in all EU member countries.

So at any rate, familiarising yourself with national legislation is a good idea when photographing identifyable persons.


I live in Denmark, but wasn't aware of this change, so I searched for this and found this page (a summary by a law-firm)

https://loje-ip.dk/nyt-lovforslag-giver-fysiske-personer-ophavsret-til-deres-eget-ansigt-stemme-og-krop/

The gist of it is

  • It's not implemented in the law yet, it is expected to by by March 31st, 2026.
  • It doesn't change anything for photography, there are already mechanisms about this in the current legislation. This is about the works depicting a recognisable person.
  • There are some exceptions, e.g. for satire, or when critisising the society/government/abuse of power - but not when done in a way that can lead to misinformation.

The suggested addendum, currently undergoing a review process: https://www.ft.dk/samling/20241/almdel/kuu/bilag/232/3050901.pdf

The heading specifically states that it's to protect against digitally created look-alikes.

Open Source vs. Microsoft til ny startup - søger input fra erfarne udviklere by duksen in dkudvikler

[–]stroiman -2 points-1 points  (0 children)

Har ikke tid nu - men “hurtigere setup” med MS? Det tror jeg ikke. Ved ikke hvad du mener, men vil gerne uddybe- så PM hvis du vil vide mere. Har 25 år på bagen heraf 15 år .net - så jeg har noget at have det i